Protection against executing injected malicious code
AssigneeInternational Business Machines Corporation
InventorRajat Rao
Life of this patent
Estimating the term…
Abstract
A computer-implemented method includes receiving, by a processing unit, an input-value of an operand used by a computer-executable instruction. The method further includes generating, by the processing unit, an encrypted-value by encrypting the input-value, and storing the encrypted-value in a memory. In response to a request to execute the computer-executable instruction, the processing unit decodes the computer-executable instruction into a machine-executable code and decrypts the encrypted-value for use by the machine-executable code. Upon executing the machine-executable code, the processing unit generates an encrypted-result by encrypting a result of the execution, stores the encrypted-result in the memory.
Claims20
A computer-implemented method comprising:
- receiving, by a processing unit, an input-value of an operand used by a computer-executable instruction;
- generating, by the processing unit, an encrypted-value by encrypting the input-value;
- storing, by the processing unit, the encrypted-value in a memory;
- in response to a request, from the processing unit, to execute the computer-executable instruction:
- decoding the computer-executable instruction into a machine-executable code;
- and
- decrypting the encrypted-value for use by the machine-executable code;
- executing, by the processing unit, the machine-executable code;
- generating, by the processing unit, an encrypted-result by encrypting a result of the execution;
- and
- storing, by the processing unit, the encrypted-result in the memory.
A system comprising:
- a memory;
- and
- one or more processing units coupled with the memory, the one or more processing units are configured to perform a method for protecting against executing injected malicious code, wherein performing the method comprises:
- receiving an input-value of an operand used by a computer-executable instruction;
- generating an encrypted-value by encrypting the input-value;
- storing the encrypted-value in the memory;
- in response to a request to execute the computer-executable instruction:
- decoding the computer-executable instruction into a machine-executable code;
- and
- decrypting the encrypted-value for use by the machine-executable code;
- executing the machine-executable code;
- generating an encrypted-result by encrypting a result of the execution;
- and
- storing the encrypted-result in the memory.
A computer program product comprising a computer-readable memory that has computer-executable instructions stored thereupon, the computer-executable instructions when executed by a processor cause the processor to perform a method for protecting against executing injected malicious code, wherein performing the method comprises:
- receiving an input-value of an operand used by a computer-executable instruction;
- generating an encrypted-value by encrypting the input-value;
- storing the encrypted-value in a memory;
- in response to a request to execute the computer-executable instruction:
- decoding the computer-executable instruction into a machine-executable code;
- and
- decrypting the encrypted-value for use by the machine-executable code;
- executing the machine-executable code;
- generating an encrypted-result by encrypting a result of the execution;
- and
- storing the encrypted-result in the memory.
Dependencies are inferred from the claim text.